Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: Mwn8XnZ70e8m67aS9YnNJb6yaRF/6wnXYVMPp6Z4EAE=
Subject key identifier: 38:6C:48:4F:C3:C9:87:65:B4:A0:53:E4:CD:88:C7:5B:07:A0:02:04
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 019D27A8A5581126C855325DF6B5FAC96C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 1537
Signing time: Thu 26 Mar 2026 01:00:56 +0000
Manifest this update: Thu 26 Mar 2026 01:00:56 +0000
Manifest next update: Fri 27 Mar 2026 01:00:56 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: KApp1PudpJTnk8Qjj5CJyMAgEM0JysRIbuFqgHmNVks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a5:58:11:26:c8:55:32:5d:f6:b5:fa:c9:6c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: Mar 26 01:00:56 2026 GMT
Not After : Mar 27 01:00:56 2026 GMT
Subject: CN=386c484fc3c98765b4a053e4cd88c75b07a00204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:6e:a0:90:6d:47:73:e7:15:de:5e:be:6c:
2e:a6:df:71:22:d4:47:6d:1d:56:d6:e9:a0:ab:ff:
e6:bb:2b:2d:21:bb:d9:cf:25:82:3c:b7:ab:bc:0d:
7b:b7:8d:05:2b:79:1f:13:a1:45:a7:4a:61:c2:6f:
c5:df:56:8b:a3:75:79:d3:c5:7d:52:ee:1d:31:d4:
ba:8f:07:bb:bd:f3:61:20:b6:f2:67:19:30:55:09:
e4:a6:02:79:48:e2:52:12:47:6e:b1:83:f3:ea:b6:
67:7e:ed:6c:c7:56:8b:45:f4:b3:49:dd:b6:4b:80:
5d:ca:32:c1:6c:cd:62:3f:7c:24:9c:7e:dd:6f:b1:
b0:6b:ab:54:76:8a:55:83:08:46:69:6f:fe:ce:da:
a5:c2:78:2b:c2:fb:e8:27:81:6f:99:18:9b:64:2c:
e7:17:08:05:23:78:98:ad:bb:b9:38:cf:28:7c:08:
ba:a3:29:90:a1:34:73:14:86:fb:7a:ba:c2:cc:26:
9e:31:49:31:bb:4e:59:23:9b:db:d1:de:39:67:19:
c7:e9:67:77:9e:7f:b3:cb:3d:da:9a:0e:59:f0:0b:
fa:a9:48:b7:c9:a9:bd:dc:d7:b3:bb:24:60:29:52:
ee:b1:9c:aa:26:b9:51:b9:5f:2f:c5:73:c4:2b:0b:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6C:48:4F:C3:C9:87:65:B4:A0:53:E4:CD:88:C7:5B:07:A0:02:04
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:65:02:22:be:66:3a:b2:7b:76:4e:45:49:8c:5b:71:24:
b1:c4:17:8f:fd:3e:ea:3d:e4:a6:6e:85:bb:e9:b6:3f:4b:e2:
a0:c4:de:b1:f8:a1:5a:39:60:7d:7a:93:f3:31:44:d5:43:da:
26:4a:04:9e:d1:85:cf:39:c5:d9:8b:07:40:f1:03:2b:69:9b:
12:7d:c3:6f:8d:70:ba:91:e9:89:e8:52:87:11:0a:a2:b8:84:
85:a1:c5:c9:8e:11:d5:3e:d4:3d:f8:25:c9:71:2c:a3:67:79:
bc:e2:0f:8b:ed:55:f1:1e:5b:4d:4f:4b:0a:ca:d8:36:58:14:
12:6e:4e:b0:2b:e4:0d:c4:c8:29:54:88:de:a5:03:22:b2:cc:
59:06:95:c6:56:03:a3:c7:24:fb:50:2b:b2:35:eb:56:9f:1b:
53:c2:a9:c5:4c:ee:8d:85:49:d6:9a:a8:db:b9:e3:74:42:5a:
6c:89:f4:d6:62:e1:a8:4d:f1:9e:3c:da:47:f6:b1:a6:e6:90:
c3:97:6a:e3:7f:e9:fe:52:93:3d:ab:a6:f3:81:e7:51:b7:f2:
71:b0:76:ac:70:1c:5b:43:22:e2:a8:5a:db:8d:e4:e9:fa:50:
d0:f1:8c:15:5a:64:7a:04:06:3f:47:d7:14:e4:aa:0d:38:78:
e8:61:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:36 2026 by rpki-client